StackRadar

CVE-2024-4067

Medium

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.014
71st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
193
of 17,781 indexed, latest versions
Container images
185
deployed by those charts
Fix available
1 of 2
affected packages

Regular Expression Denial of Service (ReDoS) in micromatch

Carried by container images the latest versions of 193 of 17,781 indexed charts deploy, on 185 images.

Affected packageAffected versionsFixed inImages
micromatchnpm2.3.5, 2.3.11, 3.1.10, 4.0.2+3 more4.0.8185
node-micromatchdeb4.0.5+~4.0.2-1no fix listed1
OSV records
GHSA-952p-6rrq-rcjvUBUNTU-CVE-2024-4067

Charts affected

193 by stars
ChartLatestAffected imagesRadar Score
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v4.15.167ebc751c171
micromatch@3.1.10
4.0.8

Open the chart page →

9,203
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
micromatch@4.0.5
4.0.8

Open the chart page →

4,431
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
micromatch@4.0.5
4.0.8

Open the chart page →

5,352
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
micromatch@4.0.5
4.0.8

Open the chart page →

5,639
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
micromatch@4.0.2
4.0.8

Open the chart page →

4,285
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
micromatch@2.3.11
4.0.8

Open the chart page →

30,326
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
openmined/syft-frontend:0.9.5d11524a3854a
micromatch@4.0.5
4.0.8

Open the chart page →

17,245
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
micromatch@4.0.5
4.0.8

Open the chart page →

2,828
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
micromatch@4.0.7
4.0.8

Open the chart page →

6,168
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
micromatch@4.0.2
4.0.8

Open the chart page →

5,251
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
micromatch@4.0.2
4.0.8

Open the chart page →

8,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
micromatch@4.0.2
4.0.8

Open the chart page →

5,946
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
micromatch@4.0.5
4.0.8

Open the chart page →

3,795
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
micromatch@4.0.5
4.0.8

Open the chart page →

10,530
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
micromatch@3.1.10
4.0.8

Open the chart page →

9,261
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
micromatch@4.0.5
4.0.8

Open the chart page →

8,212
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
micromatch@4.0.5
4.0.8

Open the chart page →

1,613
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
micromatch@3.1.10
4.0.8

Open the chart page →

17,404
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
micromatch@3.1.10
4.0.8

Open the chart page →

2,513
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
micromatch@4.0.5
4.0.8

Open the chart page →

2,521
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
micromatch@4.0.4
4.0.8

Open the chart page →

22,773
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
micromatch@4.0.4
4.0.8

Open the chart page →

7,579
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
micromatch@4.0.4
4.0.8

Open the chart page →

3,476
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
micromatch@4.0.5
4.0.8

Open the chart page →

10,311
kubeviouskubevious1.2.23 of 7See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
micromatch@4.0.5
4.0.8
kubevious/collector:1.2.1f58226f9d84e
micromatch@4.0.5
4.0.8
kubevious/parser:1.2.299ae7a5168c2
micromatch@4.0.5
4.0.8

Open the chart page →

14,204
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
micromatch@4.0.5
4.0.8

Open the chart page →

2,635
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
micromatch@4.0.2
4.0.8

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
micromatch@4.0.4
4.0.8
kobotoolbox/kpi:2.022.24dbcacc01bccd4
micromatch@4.0.5
4.0.8

Open the chart page →

18,517
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
micromatch@4.0.5
4.0.8

Open the chart page →

7,776
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
micromatch@4.0.4
4.0.8

Open the chart page →

24,488
bredbandskollen-prometheus-exporteraolde0.2.31 of 1See more

bredbandskollen-prometheus-exporter aolde 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
aolde/bredbandskollen-prometheus-exporter:1.0.2dc61ee713720
micromatch@4.0.4
4.0.8

Open the chart page →

1,972
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
micromatch@4.0.2
4.0.8

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
micromatch@4.0.2
4.0.8

Open the chart page →

10,730
opensearch-dashboardscaptnbpVerified publisher2.2.11 of 1See more

opensearch-dashboards captnbp 2.2.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
micromatch@4.0.7
4.0.8

Open the chart page →

1,843
skoonerchristianhuthVerified publisher0.4.01 of 1See more

skooner christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
micromatch@4.0.5
4.0.8

Open the chart page →

1,341
data-fairdata354-helmVerified publisher1.1.24 of 12See more

data-fair data354-helm 1.1.2

4 of the 12 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
micromatch@4.0.5
4.0.8
ghcr.io/data-fair/metrics:0a8d40779eeae
micromatch@4.0.4
4.0.8
ghcr.io/data-fair/processings:15a9216989707
micromatch@3.1.10
4.0.8
ghcr.io/data-fair/simple-directory:438a4f32fad82
micromatch@3.1.10
4.0.8

Open the chart page →

38,346
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
micromatch@3.1.10
4.0.8

Open the chart page →

5,056
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
micromatch@3.1.10
4.0.8

Open the chart page →

3,925
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
micromatch@3.1.10
4.0.8

Open the chart page →

4,260
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
micromatch@4.0.4
4.0.8

Open the chart page →

7,801
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
micromatch@4.0.2
4.0.8

Open the chart page →

17,284
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
micromatch@4.0.4
4.0.8

Open the chart page →

7,129
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
micromatch@4.0.4
4.0.8

Open the chart page →

3,369
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
micromatch@4.0.5
4.0.8

Open the chart page →

3,143
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
micromatch@4.0.5
4.0.8

Open the chart page →

5,654
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
micromatch@3.1.10
4.0.8

Open the chart page →

5,940
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
micromatch@3.1.10
4.0.8

Open the chart page →

5,300
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
micromatch@4.0.5
4.0.8

Open the chart page →

4,206
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
micromatch@4.0.5
4.0.8
treskon/portrait-ui:DEV-lateste7970783bc8d
micromatch@3.1.10
4.0.8

Open the chart page →

31,844
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
micromatch@4.0.2
4.0.8

Open the chart page →

6,879

Container images carrying it

185 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
vlebediantsev/notes-admin-front:latest007c6670ff48
micromatch@4.0.5
4.0.8
1
vlebediantsev/notes-project-front:latest945675fd2636
micromatch@4.0.5
4.0.8
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
micromatch@4.0.5
4.0.8
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
micromatch@4.0.7
4.0.8
1
wazuh/wazuh-dashboard:4.4.11787550d2358
micromatch@3.1.10
4.0.8
1
wekanteam/wekan:v4.2268a51f0327df
micromatch@2.3.11
4.0.8
1
winfred008/amazon:910a68de5b398
micromatch@4.0.5
4.0.8
1
wiremind/scrapoxy:lateste7048929a676
micromatch@2.3.11
4.0.8
1
ymuski/skooner:latest67819ca511b5
micromatch@4.0.4
4.0.8
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
micromatch@4.0.4
4.0.8
1
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
micromatch@4.0.5
4.0.8
1
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
micromatch@4.0.5
4.0.8
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
micromatch@4.0.5
4.0.8
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
micromatch@4.0.5
4.0.8
1
ghcr.io/data-fair/metrics:0a8d40779eeae
micromatch@4.0.4
4.0.8
1
ghcr.io/data-fair/processings:15a9216989707
micromatch@3.1.10
4.0.8
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
micromatch@3.1.10
4.0.8
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
micromatch@4.0.5
4.0.8
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
micromatch@4.0.2
4.0.8
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
micromatch@4.0.5
4.0.8
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
micromatch@2.3.11
4.0.8
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
micromatch@3.1.10
4.0.8
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
micromatch@4.0.5
4.0.8
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
micromatch@3.1.10
4.0.8
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
micromatch@3.1.10
4.0.8
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
micromatch@3.1.10
4.0.8
1
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
micromatch@4.0.5
4.0.8
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
micromatch@4.0.5
4.0.8
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
micromatch@4.0.5
4.0.8
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
micromatch@3.1.10
4.0.8
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
micromatch@2.3.11
4.0.8
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
micromatch@3.1.10
4.0.8
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
micromatch@4.0.4
4.0.8
1
quay.io/wekan/wekan:v5.65cb17600883a3
micromatch@2.3.11
4.0.8
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
micromatch@3.1.10
4.0.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.